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Amendments to the Claims : 

This listing of claims replaces all prior versions and listings of claims in the 
application: 

Listing of Claims : 

1 . (Previously Presented) A computer-implemented method for sharing a user's 




personal information with a host computer in a networked computing environment, the method 



comprising: 

gathering personal information from a user of a computer network; 
storing the user's personal information at a first network server; 
receiving, at the first network server, a request for the user's personal information from 
another network server; and 

sending the requested information to the other network server. 

2. (Original) The method of claim 1, wherein gathering comprises requesting 
information directly from the user. 

3. (Original) The method of claim 1, wherein gathering comprises monitoring user 
activity. 

4. (Original) The method of claim 1, wherein gathering comprises soliciting 
information from others. 

5. (Original) The method of claim 1, wherein the other network server corresponds 
to a business entity with whom the user is engaged in a transaction. 

6. (Original) The method of claim 1, wherein personal information includes one or 
more of the user's name, address, credit card information, telephone number, facsimile number, 
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e-mail address, employer name, employer address, work telephone number, buying history, 
travel preferences, food preferences, medical information, and personal interests. 

7. (Original) The method of claim 1, wherein storing comprises saving the personal 
information in a database. 

8. (Original) The method of claim 1, wherein the other network server is controlled 
by an e-commerce merchant. 

9. (Original) The method of claim 1, wherein the other network server corresponds 
to a web site. 

10. (Original) The method of claim 1, further comprising authenticating the user prior 
to sending the requested information to the other network server. 

1 1 . (Original) The method of claim 1, further comprising authenticating a party 
associated with the other network server prior to sending the requested information to the other 
network server. 

12. (Original) The method of claim 10, wherein authenticating comprises verifying a 
username and password. 

13. (Original) The method of claim 10, wherein authenticating comprises checking a 
digital certificate. 

14. (Previously Presented) The method of claim 11, wherein authenticating comprises 
verifying a username and password. 
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15. (Previously Presented) The method of claim 11, wherein authenticating comprises 
checking a digital certificate. 

16. (Previously Presented) A device for sharing a user's personal information with a 
host computer in a networked computing environment, the device comprising: 

an information collector that gathers personal information from a user of a computer 
network; 

a storage device that stores the user's personal information at a first network server; 
a receiver that receives, at the first network server, a request for the user's personal 
information from another network server; and 

a responder that sends the requested information to the other network server. 

1 7. (Currently Amended) The m e th o d device of claim 1 6, wherein the information 
collector requests information directly from the user. 

18. (Currently Amended) The device method of claim 16, wherein the information 
collector monitors user activity. 

19. (Currently Amended) The device method of claim 16, wherein the information 
collector solicits information from others. 

20. (Currently Amended) The device method of claim 16, wherein the other network 
server corresponds to a business entity with whom the user is engaged in a transaction. 

2 1 . (Currently Amended) The device method of claim 1 6, wherein personal 
information includes one or more of the user's name, address, credit card information, telephone 
number, facsimile number, e-mail address, employer name, employer address, work telephone 
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number, buying history, travel preferences, food preferences, medical information, and personal 
interests. 

22. (Currently Amended) The device method of claim 16, wherein the storage device 
saves the personal information in a database. 

23. (Currently Amended) The device m e thod of claim 16, wherein the other network 
server is controlled by an e-commerce merchant. 

24. (Currently Amended) The device method of claim 16, wherein the other network 
server corresponds to a web site. 

25. (Currently Amended) The device m ethod of claim 16, further comprising an 
authenticator that authenticates the user prior to the responder sending the requested information 
to the other network server. 

26. (Currently Amended) The device method of claim 16, further comprising an 
authenticator that authenticates a party associated with the other network server prior to the 
responder sending the requested information to the other network server. 

27. (Currently Amended) The device method of claim 25, wherein the authenticator 
verifies a username and password. 

28. (Currently Amended) The device method of claim 25, wherein the authenticator 
checks a digital certificate. 



29. (Currently Amended) The device m e thod of claim 26, wherein the authenticator 
verifies a username and password. 
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30. (Currently Amended) The device method of claim 26, wherein the authenticator 
checks a digital certificate. 

3 1 . (Previously Presented) A device for sharing a user's personal information with a 
host computer in a networked computing environment, the device comprising: 

means for gathering personal information from a user of a computer network; 

means for storing the user's personal information at a first network server; 

means for receiving, at the first network server, a request for the user's personal 

information from another network server; and 

means for sending the requested information to the other network server. 
-? ■ — — — — ■ 

32. (New) A computer-implemented method for sharing a user's personal information 
with a merchant server so as to facilitate an e-commerce transaction in a networked computing 
environment, the method comprising: 

collecting personal information from a user of a computer network; 
storing the user's personal information in a server; 

associating, at the server, a session identifier with the user's personal information; 

receiving, at the server, a request from a merchant server for at least a portion of the 
user's personal information, wherein the request includes a session identifier; 

determining, at the server, that the received session identifier corresponds to the session 
identifier associated with the user's personal information; and 

sending, from the server, at least a portion of the user's personal information to the 
merchant server when the received session identifier corresponds to the session identifier 
associated with the personal information. 

33. (New) The method of claim 32 wherein associating, at the server, a session 
identifier with the user's personal information comprises: 
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receiving, at the server, information that authenticates the user; 

generating, at the server, the session identifier in response to the server receiving the 
information that authenticates the user; and 

associating, at the server, the generated session identifier with the user's personal 
information. 

34. (New) The method of claim 33 wherein the information that authenticates the user 
comprises a username and password such that receiving, at the server, information that 
authenticates the user comprises receiving, at the server, a username and password. 

35. (New) The method of claim 33 further comprising sending, from the server, the 
generated session identifier to a client computer being used by the user. 

36. (New) The method of claim 32 wherein the personal information comprises credit 
card information such that storing the user's personal information in a server comprises storing 
credit card information. 

37. (New) The method of claim 36 wherein sending, from the server, at least a portion 
of the user's personal information to the merchant server comprises sending partial credit card 
information to the merchant server such that the merchant server can solicit confirmation from 
the user that a credit card account associated with the credit card information should be used to 
perform the e-commerce transaction. 

38. (New) The method of claim 36 wherein sending, from the server, at least a portion 
of the user's personal information to the merchant server comprises sending full credit card 
information to the merchant server such that the merchant server can perform the e-commerce 
transaction using the credit card information. 
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39. (New) The method of claim 32 further comprising: 

receiving, at the server, a digital certificate from the merchant server; and 
verifying the identity of the merchant server using the digital certificate. 

40. (New) The method of claim 32 wherein the user's personal information includes 
one or more of the user's name, address, credit card information, telephone number, facsimile 
number, e-mail address, employer name, employer address, work telephone number, buying 
history, travel preferences, food preferences, medical information, and personal interests. 

41 . (New) A device for sharing a user's personal information with a merchant server 
so as to facilitate an e-commerce transaction in a networked computing environment, the device 
comprising: 

means for collecting personal information from a user of a computer network; 

means for storing the user's personal information in a server; 

means for associating, at the server, a session identifier with the user's personal 
information; ( 

means for receiving, at the server, a request from a merchant server for at least a portion 
of the user's personal information, wherein the request includes a session identifier; 

means for determining, at the server, that the received session identifier corresponds to 
the session identifier associated with the user's personal information; and 

means for sending, from the server, at least a portion of the user's personal information to 
the merchant server when the received session identifier corresponds to the session identifier 
associated with the personal information. 

42. (New) The device of claim 41 wherein the means for associating, at the server, a 
session identifier with the user's personal information comprises: 

means for receiving, at the server, information that authenticates the user; 
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means for generating, at the server, the session identifier in response to the server 
receiving the information that authenticates the user; and 

means for associating, at the server, the generated session identifier with the user's 
personal information. 

43. (New) The device of claim 42 wherein the information that authenticates the user 
comprises a username and password such that the means for receiving, at the server, information 
that authenticates the user comprises means for receiving, at the server, a username and 
password. 

44. (New) The device of claim 42 further comprising means for sending, from the 
server, the generated session identifier to a client computer being used by the user. 

45. (New) The device of claim 41 wherein the personal information comprises credit 
card information such that the means for storing the user's personal information in a server 
comprises means for storing credit card information. 

46. (New) The device of claim 45 wherein the means for sending, from the server, at 
least a portion of the user's personal information to the merchant server comprises means for 
sending partial credit card information to the merchant server such that the merchant server can 
solicit confirmation from the user that a credit card account associated with the credit card 
information should be used to perform the e-commerce transaction. 

47. (New) The device of claim 45 wherein the means for sending, from the server, at 
least a portion of the user's personal information to the merchant server comprises means for 
sending full credit card information to the merchant server such that the merchant server can 
perform the e-commerce transaction using the credit card information. 
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48. (New) The device of claim 41 further comprising: 

means for receiving, at the server, a digital certificate from the merchant server; and 
means for verifying the identity of the merchant server using the digital certificate. 

49. (New) The device of claim 41 wherein the user's personal information includes 
one or more of the user's name, address, credit card information, telephone number, facsimile 
number, e-mail address, employer name, employer address, work telephone number, buying 
history, travel preferences, food preferences, medical information, and personal interests. 




